Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/d710522a-bbe4-3c0d-a3b6-095f0663cb52.roa
File:                     d710522a-bbe4-3c0d-a3b6-095f0663cb52.roa (raw, json)
Hash identifier:          u0kUyuI8x4z4cc/Qt9wj74hqx3VXLpCAKdbPScnfQfs=
Subject key identifier:   C1:8E:11:22:14:91:CD:99:22:DA:FE:F7:05:A9:5B:11:F7:AD:56:E8
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F43285848FD56CFBAA23A00FACA2C7600
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/d710522a-bbe4-3c0d-a3b6-095f0663cb52.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     2559
IP address blocks:        198.241.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:cf:ba:a2:3a:00:fa:ca:2c:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=8e572c6c-4940-4864-8d69-a2f9157559b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:3d:a7:8c:66:40:59:ba:12:e9:3d:17:63:
                    19:66:41:a3:5c:39:5f:0b:72:d9:1a:d1:27:d5:71:
                    e9:a9:7d:86:79:d5:a7:56:d3:13:e9:1a:5a:f8:0d:
                    3d:b6:a3:28:46:40:10:dd:47:ef:d3:2a:6d:b0:d1:
                    5c:79:a1:5d:a8:e8:96:ff:aa:16:32:2b:9e:c3:fe:
                    3b:7d:35:eb:f6:3c:76:31:e4:35:d3:a5:16:ae:b0:
                    77:4b:30:4f:02:96:82:30:c0:2a:b1:3b:b5:9a:a8:
                    06:9f:49:42:d4:68:c1:fd:77:a9:62:bd:8a:d3:d0:
                    a8:f3:b0:6b:8d:37:71:40:2f:86:d0:5a:6a:d4:33:
                    6a:a9:7c:75:c6:96:4e:8a:4e:2c:98:8e:f1:18:7e:
                    e1:d9:ce:1b:43:d1:8c:15:15:11:7b:5b:1b:a8:d2:
                    17:af:03:cf:c9:aa:c6:62:07:13:73:75:ea:42:ec:
                    19:46:9e:13:60:b2:da:9b:2d:c0:73:45:ef:e7:9d:
                    cc:e6:a3:eb:7f:ff:e5:dc:46:16:e8:c3:f6:b8:4c:
                    7e:46:a5:4c:38:2a:c9:ae:a9:33:3d:54:58:bd:e1:
                    2a:e8:42:03:65:e0:4f:af:f9:30:e3:b0:2f:ee:cd:
                    25:6f:4b:59:42:3f:25:41:d6:63:3f:01:ab:0b:23:
                    98:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8E:11:22:14:91:CD:99:22:DA:FE:F7:05:A9:5B:11:F7:AD:56:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/d710522a-bbe4-3c0d-a3b6-095f0663cb52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:2d:dd:cd:91:b5:34:71:4c:17:28:d9:d3:23:5e:5e:51:d5:
         d8:ea:b7:26:f5:05:d6:1b:fd:65:7a:b4:28:f6:d3:68:6f:ba:
         40:ad:0c:27:bc:ae:48:aa:e7:72:6f:3f:ff:30:65:44:19:b5:
         c0:83:a4:f0:29:83:aa:b3:13:31:54:65:8d:cb:ff:e8:64:d6:
         a1:35:c8:68:19:e1:77:dc:cc:76:bf:3b:c3:51:53:90:27:a5:
         8d:e9:7e:da:07:06:e3:3b:f3:13:70:d1:a2:7a:8c:db:ac:a4:
         32:5f:80:68:80:1a:a3:c3:af:00:af:e0:f6:13:df:48:c7:ab:
         b6:3b:86:db:18:84:28:4a:7d:c0:16:32:a3:d3:57:e3:44:26:
         0a:84:26:1a:58:77:81:49:a3:f7:e8:f6:3b:7a:34:01:87:b7:
         4a:86:87:71:04:35:ff:ed:15:a6:68:90:38:a1:35:c0:11:d4:
         13:8d:97:ec:d8:d9:fa:6b:ef:47:95:3b:1b:40:af:64:2c:d0:
         55:b1:61:65:9a:bc:17:e6:23:bb:a3:4c:d7:de:07:45:c2:cc:
         f6:61:d2:ac:3e:6e:c3:00:76:0f:46:36:62:a4:5c:f8:7f:8a:
         54:64:b0:a1:aa:c2:b3:80:cb:fe:f7:af:f7:a8:ab:d8:eb:33:
         a0:00:58:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:34 2025 by rpki-client